New ICO Surveillance Guidance
New ICO guidance for Video Surveillance
The ICO has published guidance on the processing of personal data by video surveillance systems, click here to go to the ICO website
- Surveillance systems should only be utilised if they are a necessary and proportionate response to the issue being addressed.
- Before using any new system, a Data Protection Impact Assessment (“DPIA”) must be performed for any type of processing that is likely to result in a high risk to individuals such as processing special category data, large-scale public monitoring, and monitoring individuals in the workplace.
- As with all data processing, a lawful basis is needed for processing data. The most appropriate ground is likely to be on a public task within the school.
- In terms of fair and lawful processing, surveillance should only be used in places where individuals have an expectation of privacy or where it is necessary to deal with very serious concerns.
- People must be informed when they are in an area where a surveillance system is in operation. Signs should be positioned near the places monitored to enable individuals to recognise the circumstances of surveillance before entering the area.
Collecting Staff Vaccination Data
Collecting Staff Vaccination Data There is no quick answer as to whether schools are legally permitted to collect vaccination data. As well as considerations under data protection law, employers must also be mindful of obligations arising under areas such as...
Sharing Personal Data with the Police
One of the most common questions we get asked concerns sharing data with law enforcement offices. The UK GDPR does not prevent you sharing personal data with such bodies such as the police (known under data protection law as “competent authorities”) who are...
Core Principles of Data Protection
And the rights of individuals Core Principles of Data Protection Data must be processed lawfully, fairly and in a transparent manner Data must be collected for specified, explicit and legitimate purposesThe data collected must be adequate, relevant and limited to...